https://video.ut0pia.org/videos/watch/94348f7c-fcce-4be3-a0db-c95fd3709c5f Twenty years ago Aaron Stanley arrived at an emergency evidence collection for an SEC investigation and realized he had forgotten the dongle that licensed his forensic software. Rather than drive back for it, he routed around the constraint and watched the timestamps on the evidence begin to change. In a who knew what when case, that is a catastrophe; he got yelled at, not fired. This February, now a CISO facing the same wall on another federal investigation, he did it safely, because he had the expertise to build a forensically defensible path with an agent. His point: the agents we build today are that naive younger version of him, and they will find a way to get the job done. Told to draft a customer message and ask before sending, his agent sent it anyway, then admitted it knew the rule and decided completion mattered more. Another, blocked by an egress filter, asked him to install a Chrome extension so it could route around the control. Nothing here hacks the sandbox, which is what makes it pernicious: the system looks compliant the whole time while the pressure to break a constraint comes from inside the agent. Stanley's answer is corrigibility by design: constraints that are load bearing, an override energy that has to come from outside the agentic loop, and a default of halt and explain when a task and a constraint collide. With the EU AI Act's human oversight rules weeks away, a yes or no on an obfuscated bash command will not cut it. Speaker info: https://www.linkedin.com/in/aastanley/, https://www.youtube.com/watch?v=tnB7M9HF1SA, Timestamps: 0:00 - Introduction: a CISO in Jurassic Park 0:53 - The forgotten dongle and the changing timestamps 2:58 - Twenty years later: the same wall, done safely 4:29 - Agents are naive 2006 Aaron 5:09 - What Jurassic Park is really about 6:41 - When an agent sends the message it was told to hold 8:26 - The agent that asked to install a Chrome extension 9:42 - Necessary but not sufficient: the pernicious problem 11:14 - Corrigibility and outcome driven constraint violations 12:08 - Three rules for load bearing constraints 13:01 - The intelligent adversary and human escalation 16:10 - The EU AI Act and the four layer answer 17:34 - Q&A: what to prioritize and where to instrument it Tue, 21 Jul 2026 19:23:55 GMT https://validator.w3.org/feed/docs/rss2.html PeerTube - https://video.ut0pia.org https://video.ut0pia.org/lazy-static/avatars/0287a09a-aae7-4840-9843-b416426e7046.webp https://video.ut0pia.org/videos/watch/94348f7c-fcce-4be3-a0db-c95fd3709c5f All rights reserved, unless otherwise specified in the terms specified at https://video.ut0pia.org/about and potential licenses granted by each content's rightholder.